Privacy policy

Last updated: July 2026.

Who is responsible for your data

Deskt (deskt.eu) is a trading name of Botlease, the data controller for personal data processed through this shop. Contact: via our contact form. KVK 95943420.

What we collect and why

  • Order data: your name, email, shipping address and order contents. We need this to process and deliver your order and to provide support. Legal basis: performance of a contract.
  • Payment data: handled by our payment provider, Stripe, on its own secure pages — and by Klarna if you choose to pay with Klarna there. We receive a payment confirmation and reference, not your full card number.
  • Communications: messages you send us, kept so we can help you.

Who we share it with

We never sell your data. These are the parties that actually receive some of it, and what they get:

  • Stripe (payments): you enter your card or iDEAL details on Stripe's own secure page; we receive a confirmation, a reference and the payment status.
  • Klarna (pay later, only if you pick it): Klarna is one of the methods offered on that Stripe page. Choose it and Klarna handles the payment itself, as its own controller and under its own privacy notice — it receives your name, e-mail address, delivery address, the amount and the order, and it may run its own identity or credit check before approving you. Pick any other method and Klarna receives nothing.
  • CJ Dropshipping (fulfilment): gets your name, delivery address and the items, so your parcel can be packed and shipped.
  • Resend (e-mail): delivers your order confirmation and our replies, so it handles your e-mail address and the contents of those messages.
  • Vercel (hosting and visitor statistics): every request to this site passes through Vercel's servers, so it processes your IP address and the pages you open. Vercel Inc. is a US company, so a transfer to the United States can be involved; it acts as our processor under its data-processing agreement.
  • Meta (advertising): only when we are actually running ads and you have accepted on the cookie bar. Meta then also uses what it receives for its own purposes, so it is not simply working on our instructions, and data goes to the United States. If you decline, or if there is no bar at all because advertising is switched off, Meta receives nothing.

Apart from Meta and Klarna, each of these parties processes your data on our instructions under a data-processing agreement. Meta and Klarna decide for themselves what they do with what they receive.

One thing worth knowing, because it happens before any choice you make: the photos on this site are loaded straight from someone else's image servers — our supplier's, cf.cjdropshipping.com and oss-cf.cjdropshipping.com, and the stock photography on the home page, the category pages, the guides and the news articles from images.pexels.com (the shop overview and the product pages use supplier photos only, though their preconnect still opens a connection to Pexels). Loading an image means your browser contacts that server itself, so it sees your IP address and browser details the moment a page with photos opens, regardless of any cookie choice; for Pexels the page even opens the connection slightly ahead of the first photo, to make it load faster. No cookies are set for those images and we send nothing else along with them, but we would rather say so than pretend it does not happen. Together with the parties listed above, those image servers are the complete set of outside servers this site makes your browser contact by itself — nothing else is loaded from anywhere else. A link you choose to click, naturally, takes you wherever it points.

How long we keep it

We keep order and invoice data for as long as required by law (Dutch tax law generally requires seven years for financial records) and delete other data when it is no longer needed.

Your rights

Under the GDPR you can request access to, correction of, or deletion of your personal data, object to processing, or ask for a copy of your data. Send your request via our contact form. You also have the right to complain to your national data-protection authority.

Cookies and similar techniques

We keep this short because there is not much to tell:

  • Functional (always on): your shopping cart, your light/dark theme, your cookie answer and the order you just placed (see below for exactly how long) live in your browser's own local storage. That storage itself sends nothing anywhere and the shop cannot work without it, so no consent is required. When you press Checkout, the items in your cart and the address details you fill in are of course sent to our own API, which is how the payment and the order get made.
  • Statistics (always on): we count page views with Vercel Web Analytics. It sets no cookies and stores no identifier in your browser; per Vercel's own documentation it derives a short technical hash from the incoming request so that page views within one session can be told apart. That hash is not shared with us, and no profile is built about you across sites or over time. What we see are visit and page counts.
  • Advertising (only with your consent, and only while we run ads): when an advertising pixel is configured, a bar asks whether we may load the Meta (Facebook/Instagram) pixel, which sets cookies and reports which pages and products you view, what you add to your cart, when you start a checkout and what you order — including the amounts — so we can tell which of our ads led to a sale. Accept and it loads; decline, or leave the question open, and not a single request goes to Meta. A pixel has been configured since 30 July 2026, so the bar appears on your first visit and nothing is loaded until you answer it. If we ever remove the pixel again, the question disappears with it: with no pixel there is nothing to consent to and no bar appears at all.

What lives in local storage: deskt.cart.v1 (your cart), deskt.theme (light or dark), deskt.consent.v1 (your cookie answer, with the moment you gave it and the version of the text you answered), deskt.lastOrder and deskt.pendingOrder (the order you just placed: its reference, your e-mail address, the items and the total — a demo order also holds the name you typed) and deskt.purchaseTracked (one order reference, so a reload cannot report the same order twice). If your browser refuses that storage, your cookie answer is held for the rest of your browsing session instead, so we do not keep asking.

About that order record, precisely: it is written in your browser just before you are sent to the payment page, and it is deleted the moment you open the confirmation page for your order — that is the only thing it exists for. If you never get there, for instance because you close the tab on the way back, it stays in your own browser until you clear this site's data; nothing sends it anywhere in the meantime. The one deliberate delay: if the cookie bar is still open on the confirmation page, the record waits until you have answered it, because answering Accept may still report the sale.

Changed your mind? Use the Cookie settings link at the bottom of any page. It clears your stored answer and asks the question again, so withdrawing is exactly as easy as giving. The link is shown whenever a pixel is configured, which it is today; with no pixel it is not shown at all, because then there is no answer to withdraw. New events stop the moment you withdraw, and cookies Meta has already placed stay in your browser until you clear them there. Questions about this, or a request to have advertising data removed at Meta's end? Mail hallo@botlease.nl.

Contact

Questions about your privacy? Use the form on our contact page or mail hallo@botlease.nl — we reply within one business day. See also our Terms & conditions.